Symantec Shared Owner and Tamper Settings

Hello,

We have a Server 2008 with SYmantec SEP Manager 12, and Windows 7 clients.  On the Windows 7 clients we need to change the Program\Files\Common Files\Symantec Shared to:

- All folders and files owner by Domain Admins

- Change all to System Full Control, Admins Full Control and Users Read & Execute

Q: Is I disable to Tamper Protection and make the above changes, then enable Tamper Protection, will the changes stay?

Q: With users having Read and Execute, can they launch an application or disable SEP with these rights?

Thanks

Bruce